crosvm/seccomp/x86_64/coiommu.policy

# Copyright 2022 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
@include /usr/share/policy/crosvm/common_device.policy

# VFIO_IOMMU_MAP/UNMAP_DMA
ioctl: arg1 == 0x3B71 || arg1 == 0x3B72
prctl: arg0 == PR_SET_NAME
coiommu: enable coiommu Coiommu can be enabled through the command line. E.g. To enable coiommu for a VFIO pass-through device: --vfio=/sys/bus/pci/devices/0000:00:02.0,iommu=coiommu BUG=b:188481989 TEST=Boot a VM with a VFIO pass through device w/ coiommu TEST=Boot a VM with a VFIO pass through device w/o coiommu Change-Id: Ica6145d7bc6a4c398f0fc10899f8ee24138615c4 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3292934 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Reviewed-by: David Stevens <stevensd@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> 2022-01-07 02:26:24 +00:00			`# Copyright 2022 The Chromium OS Authors. All rights reserved.`
			`# Use of this source code is governed by a BSD-style license that can be`
			`# found in the LICENSE file.`
			`@include /usr/share/policy/crosvm/common_device.policy`

			`# VFIO_IOMMU_MAP/UNMAP_DMA`
			`ioctl: arg1 == 0x3B71 \|\| arg1 == 0x3B72`
			`prctl: arg0 == PR_SET_NAME`